Migrating user to new domain loses local profile

[David Naigles]

When I migrate a user to a new domain and have him logon to his local
machine, he receives an error stating the a temporary local profile will be
used due to security issues or a corrupted local profile. I performed the
following.

1. I logged on and off as the newdomain\user.
2. while logged on as localmachine\administrator I added newdomain\user to
local group Administrators .
3. I changed the ProfilePath for the newdomin\user's SID to point to the
olddomain\user's local profile.
4. I logged on as the newdomain\user.

What did I do wrong.

David Naigles

 

[Ace Fekay [MVP]]

In

When I migrate a user to a new domain and have him logon to his local
machine, he receives an error stating the a temporary local profile
will be used due to security issues or a corrupted local profile. I
performed the following.

1. I logged on and off as the newdomain\user.
2. while logged on as localmachine\administrator I added
newdomain\user to local group Administrators .
3. I changed the ProfilePath for the newdomin\user's SID to point to
the olddomain\user's local profile.
4. I logged on as the newdomain\user.

What did I do wrong.

David Naigles

Did you use ADMT? That has a security translation wizard that will take care
of profiles for you.

--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.

 

[Yevgen Lazaryev]

....In the step (3) don't change the profile path but instead, use "Copy.."
button in User Profiles tab under MyComputer to copy the olddomain\user
profile to newdomain\user folder ....

"David Naigles" <[email protected]> a écrit dans le message de
| When I migrate a user to a new domain and have him logon to his local
| machine, he receives an error stating the a temporary local profile will
be
| used due to security issues or a corrupted local profile. I performed the
| following.
|
| 1. I logged on and off as the newdomain\user.
| 2. while logged on as localmachine\administrator I added newdomain\user
to
| local group Administrators .
| 3. I changed the ProfilePath for the newdomin\user's SID to point to the
| olddomain\user's local profile.
| 4. I logged on as the newdomain\user.
|
| What did I do wrong.
|
| David Naigles
|
|

 

[David Naigles]

I tried this but the "Copy" is grayed out. Is there a setting I am missing?

 

[Cary Shultz [A.D. MVP]]

The Copy to... will only exist if there is a trust between the old domain
and the new domain. Assuming that this is not the case you would need to
use Windows Explorer to do this.

First, log on as either the local Administrator or the Domain Admin of the
new domain and join the computer account object to the new domain.
Then, log on as the user - but do nothing! You are simply logging on to
create his profile so that there is something to which you can copy the old
profile.
Finally, open up Windows Explorer and copy the old profile to the new
profile. This involves copying several of the folders. Should not take
that long at all.

HTH,

Cary

 

[Cary Shultz [A.D. MVP]]

I should clarify something. The Copy To... button will exist regardless.
It will not work, though, if there is no trust between both domains. In
this case, you would need to use Windows Explorer!

Sorry for any confusion that my initial statement might have caused.

Cary